Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Tfsec is now part of Trivy

ShellCheck, a static analysis tool for shell scripts

A Pluggable Terraform Linter

Lightweight static analyzer for several programming languages

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Parsing, analyzing, and comparing source code across many languages